fix(ix-ci): keep the ix preview strictly off the shared caches by harivansh-afk · Pull Request #4539 · BoundaryML/baml

harivansh-afk · 2026-08-20T00:12:51Z

Nothing outside the ix-* files.

Follow up to #4537

The preview was not Linux-only on this repo. cargo-test-windows, size-gate-macos, size-gate-windows, and the windows SDK matrix legs were repo-gated for forks. Deleted outright: the preview owns the Linux lanes only, and the ix size report now covers linux + wasm.
bumped ix-runners to use latest from github.com/indexable-inc/ix-runners
fix secret path for ix-runners

Summary by CodeRabbit

Chores
- Streamlined preview validation workflows to focus on Linux and WASM environments.
- Removed Windows, macOS, and related platform-specific preview checks.
- Improved musl build configuration and disabled preview cache saving.
- Updated runner references and related Windows sccache documentation.
- Simplified size-gate enforcement and reporting across supported preview platforms.

The mac/win jobs and matrix legs existed to feed the unified size report and were repo-gated for forks; on the upstream repo they would have run as paid Blacksmith duplicates of the gating workflow. Deleted: the preview owns the Linux lanes only. rust-cache saves are off in the copy (the pinned env shifts every key, so saves would write a parallel lineage into the shared cache quota), and the reconcile wake trigger names the one workflow whose jobs run on ix instead of a glob.

vercel · 2026-08-20T00:12:57Z

@harivansh-afk is attempting to deploy a commit to the Boundary Team on Vercel.

A member of the Team first needs to authorize it.

coderabbitai · 2026-08-20T00:14:02Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 483bda2b-e106-4384-b56d-6a688c8372f8

📥 Commits

Reviewing files that changed from the base of the PR and between 817d7b3 and fc41e01.

📒 Files selected for processing (1)

.github/workflows/ix-runners.yml

Included review availability: Your plan provides up to 8 included reviews per hour; 4 remain after this review.

📝 Walkthrough

Walkthrough

The IX preview workflows now restrict triggers and platform coverage. Cargo jobs stop saving Rust caches, remove Windows testing, and configure musl compilation. Size-gate enforcement now processes Linux and WASM reports only.

Changes

IX preview workflow updates

Layer / File(s)	Summary
Preview trigger and runner configuration `.github/workflows/ix-runners.yml`	The `workflow_run` trigger now accepts only `CI on ix (preview)` runs. The reconcile job uses the `boundary-tools-dev` environment. The pinned `ix-runners` action reference was updated.
Cargo test platform and cache scope `.github/workflows/ix-cargo-tests.reusable.yaml`	Linux, musl, WASM, and MSRV jobs no longer save Rust cache entries. The musl job sets `musl-gcc`. Windows cargo tests were removed, SDK selection is Linux-only, and merged jobs no longer depend on Windows tests.
Size gate platform scope `.github/workflows/ix-size-gate.reusable.yaml`	Size-gate enforcement now depends on and aggregates Linux and WASM reports. Policy rechecks no longer include macOS or Windows.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Merge Risk: 🔵 Low · up to fc41e

The PR limits preview CI to Linux lanes and updates the runner revision. It is mergeable with owner awareness that environment protection or token configuration could prevent preview jobs from starting, and that the updated runner should receive a pool-mode smoke test before broad reliance.

Possibly related PRs

BoundaryML/baml#4537: Introduced the IX workflows modified by this change.
BoundaryML/baml#4483: Added the preview IX workflows whose platform and trigger scope are narrowed here.

Poem

A rabbit checks the Linux lane,
While WASM guards the size-gate plane.
Rust caches rest on seeded disks,
Musl builds with musl-gcc briskly.
Windows tests hop out of sight—
Preview workflows run just right.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the primary change: keeping the ix preview workflow off shared caches.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Picks up the evidence-gated seed deletion fix and the seed-integrity batch (promotion is never silently skipped, listings tolerate partial reads, fork-PR runs cannot mint seeds).

The secret lives in that environment's secrets, not the repo's; without the job-level environment it reads as empty and the reconcile skips.

harivansh-afk marked this pull request as draft August 20, 2026 00:13

harivansh-afk changed the title ~~ci: keep the ix preview strictly Linux-only and off the shared caches~~ ci: keep the ix preview strictly off the shared caches Aug 20, 2026

coderabbitai Bot approved these changes Aug 20, 2026

View reviewed changes

harivansh-afk marked this pull request as ready for review August 20, 2026 00:16

harivansh-afk changed the title ~~ci: keep the ix preview strictly off the shared caches~~ fix(ix-ci): keep the ix preview strictly off the shared caches Aug 20, 2026

harivansh-afk added 2 commits August 20, 2026 00:22

ci: bump the ix-runners pin to current main

817d7b3

Picks up the evidence-gated seed deletion fix and the seed-integrity batch (promotion is never silently skipped, listings tolerate partial reads, fork-PR runs cannot mint seeds).

ci: read IX_TOKEN from the boundary-tools-dev environment

fc41e01

The secret lives in that environment's secrets, not the repo's; without the job-level environment it reads as empty and the reconcile skips.

sxlijin added this pull request to the merge queue Aug 20, 2026

Merged via the queue into BoundaryML:canary with commit 2ece4dc Aug 20, 2026
37 of 39 checks passed

Navigation Menu

Uh oh!

fix(ix-ci): keep the ix preview strictly off the shared caches - #4539

fix(ix-ci): keep the ix preview strictly off the shared caches#4539
sxlijin merged 3 commits into
BoundaryML:canaryfrom
harivansh-afk:ix-preview-linux-only

harivansh-afk commented Aug 20, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Aug 20, 2026

Uh oh!

coderabbitai Bot commented Aug 20, 2026 •

edited

Loading

Walkthrough

Changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

harivansh-afk commented Aug 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

vercel Bot commented Aug 20, 2026

Uh oh!

coderabbitai Bot commented Aug 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

harivansh-afk commented Aug 20, 2026 •

edited

Loading

coderabbitai Bot commented Aug 20, 2026 •

edited

Loading